Security Management Final questions
n answers rated A+
Risk Analysis - ANS ✔Assets-Threats-Vulnerabilities-Exposure-Risk-Safeguards
Risk Management Philosophy - ANS ✔1. Identify probabilities of loss
2. Reduce those probabilities
Risk management process is idealized - ANS ✔Exact numbers are often difficult to obtain.
Exercise is often more important than outcome
Need to fit to situation
There are alternatives
(Benchmarking/Evaluation/Standards)
Exposure Factor (EF) - ANS ✔The loss the org would experience if one specific asset is exploited.
Potential loss, express as a percentage
Single Loss Expectancy (SLE) - ANS ✔Cost associated with a single realized risk against the asset
SLE = EF * asset's value
Annualized Rate Occurrence (ARO) - ANS ✔The expected frequency the threat or risk will occur
Annualized Loss Expectancy (ALE) - ANS ✔Possible yearly cost of all instances of a threat against
the asset
ALE=SLE *ARO
n answers rated A+
Risk Analysis - ANS ✔Assets-Threats-Vulnerabilities-Exposure-Risk-Safeguards
Risk Management Philosophy - ANS ✔1. Identify probabilities of loss
2. Reduce those probabilities
Risk management process is idealized - ANS ✔Exact numbers are often difficult to obtain.
Exercise is often more important than outcome
Need to fit to situation
There are alternatives
(Benchmarking/Evaluation/Standards)
Exposure Factor (EF) - ANS ✔The loss the org would experience if one specific asset is exploited.
Potential loss, express as a percentage
Single Loss Expectancy (SLE) - ANS ✔Cost associated with a single realized risk against the asset
SLE = EF * asset's value
Annualized Rate Occurrence (ARO) - ANS ✔The expected frequency the threat or risk will occur
Annualized Loss Expectancy (ALE) - ANS ✔Possible yearly cost of all instances of a threat against
the asset
ALE=SLE *ARO
